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Internet Control Message Protocol (ICMPv6) 
for the Internet Protocol Version 6 (IPv6) 
Specification 


Status of this Memo 


This document specifies an Internet standards track protocol for the 
Internet community, and requests discussion and suggestions for 


improvements. Please refer to the current edition of the "Internet 

Official Protocol Standards" (STD 1) for the standardization state 

and status of this protocol. Distribution of this memo is unlimited. 
Abstract 


This document specifies a set of Internet Control Message Protocol 
(ICMP) messages for use with version 6 of the Internet Protocol 
(IPv6). The Internet Group Management Protocol (IGMP) messages 
specified in STD 5, RFC 1112 have been merged into ICMP, for IPv6, 
and are included in this document. 
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Le 


Introduction 


The Internet Protocol, version 6 (IPv6) is a new version of IP. IPv6 
uses the Internet Control Message Protocol (ICMP) as defined for IPv4 
[RFC-792], with a number of changes. The Internet Group Membership 
Protocol (IGMP) specified for IPv4 [RFC-1112] has also been revised 
and has been absorbed into ICMP for IPv6. The resulting protocol is 
called ICMPv6, and has an IPv6 Next Header value of 58. 


This document describes the format of a set of control messages used 
in ICMPv6. It does not describe the procedures for using these 
messages to achieve functions like Path MTU discovery or multicast 
group membership maintenance; such procedures are described in other 
documents (e.g., [RFC-1112, RFC-1191]). Other documents may also 
introduce additional ICMPv6 message types, such as Neighbor Discovery 
messages [IPv6-DISC], subject to the general rules for ICMPv6 
messages given in section 2 of this document. 


Terminology defined in the IPv6 specification [IPv6] and the IPv6 
Routing and Addressing specification [IPv6-ADDR] applies to this 
document as well. 


ICMPv6 (ICMP for IPv6) 


ICMPv6 is used by IPv6 nodes to report errors encountered in 
processing packets, and to perform other internet-layer functions, 
such as diagnostics (ICMPv6 "ping") and multicast membership 
reporting. ICMPv6 is an integral part of IPv6 and MUST be fully 
implemented by every IPv6 node. 


2.1 Message General Format 


ICMPv6 messages are grouped into two classes: error messages and 
informational messages. Error messages are identified as such by 
having a zero in the high-order bit of their message Type field 
values. Thus, error messages have message Types from 0 to 127; 
informational messages have message Types from 128 to 255. 


This document defines the message formats for the following ICMPv6 
messages: 
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ICMPv6 error messages: 


1 Destination Unreachable (see section 3.1) 
2 Packet Too Big (see section 3.2) 
3 Time Exceeded (see section 3.3) 
4 Parameter Problem (see section 3.4) 
ICMPv6 informational messages: 
128 Echo Request (see section 4.1) 
129 Echo Reply (see section 4.2) 
130 Group Membership Query (see section 4.3) 
131 Group Membership Report (see section 4.3) 
132 Group Membership Reduction (see section 4.3) 


Every ICMPv6 message is preceded by an IPv6 header and zero or more 
IPv6 extension headers. The ICMPv6 header is identified by a Next 
Header value of 58 in the immediately preceding header. (NOTE: this 
is different than the value used to identify ICMP for IPv4.) 


The ICMPv6 messages have the following general format: 


0 1 2 3 
07122 34D 0 08:09:00 1 2.038: 5.6: 8, 190507 1:20:34, 97 6.1890 1 
HA A OO A O O O A A A A O O O O A A A A A A ++ 

| Type | Code | Checksum 
Hato A O AO A O O A A A A O O te O A A A A A ++ 
| | 


+ Message Body + 


The type field indicates the type of the message. Its value 
determines the format of the remaining data. 


The code field depends on the message type. It is used to create an 
additional level of message granularity. 


The checksum field is used to detect data corruption in the ICMPv6 
message and parts of the IPv6 header. 

2.2 Message Source Address Determination 
A node that sends an ICMPv6 message has to determine both the Source 
and Destination IPv6 Addresses in the IPv6 header before calculating 


the checksum. If the node has more than one unicast address, it must 
choose the Source Address of the message as follows: 
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(a) If the message is a response to a message sent to one of the 
node’s unicast addresses, the Source Address of the reply must 
be that same address. 


(b) If the message is a response to a message sent to a multicast or 
anycast group in which the node is a member, the Source Address 
of the reply must be a unicast address belonging to the 
interface on which the multicast or anycast packet was received. 


(c) If the message is a response to a message sent to an address 
that does not belong to the node, the Source Address should be 
that unicast address belonging to the node that will be most 
helpful in diagnosing the error. For example, if the message is 
a response to a packet forwarding action that cannot complete 
successfully, the Source Address should be a unicast address 
belonging to the interface on which the packet forwarding 
failed. 


(d) Otherwise, the node’s routing table must be examined to 
determine which interface will be used to transmit the message 
to its destination, and a unicast address belonging to that 
interface must be used as the Source Address of the message. 


2.3 Message Checksum Calculation 


The checksum is the 16-bit one’s complement of the one’s complement 
sum of the entire ICMPv6 message starting with the ICMPv6 message 
type field, prepended with a "pseudo-header" of IPv6 header fields, 
as specified in [IPv6, section 8.1]. The Next Header value used in 
the pseudo-header is 58. (NOTE: the inclusion of a pseudo-header in 
the ICMPv6 checksum is a change from IPv4; see [IPv6] for the 
rationale for this change.) 


For computing the checksum, the checksum field is set to zero. 


2.4 Message Processing Rules 


Implementations MUST observe the following rules when processing 
ICMPv6 messages (from [RFC-1122]): 


(a) If an ICMPv6 error message of unknown type is received, it MUST 
be passed to the upper layer. 


(b) If an ICMPv6 informational message of unknown type is received, 
it MUST be silently discarded. 
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(c) Every ICMPv6 error message (type < 128) includes as much of the 
IPv6 offending (invoking) packet (the packet that caused the 
error) as will fit without making the error message packet 
exceed 576 octets. 


(d) In those cases where the internet-layer protocol is required to 
pass an ICMPv6 error message to the upper-layer protocol, the 
upper-layer protocol type is extracted from the original packet 
(contained in the body of the ICMPv6 error message) and used to 
select the appropriate upper-layer protocol entity to handle the 
error. 


If the original packet had an unusually large amount of 
extension headers, it is possible that the upper-layer protocol 
type may not be present in the ICMPv6 message, due to truncation 
of the original packet to meet the 576-octet limit. In that 
case, the error message is silently dropped after any IPv6-layer 
processing. 


(e) An ICMPv6 error message MUST NOT be sent as a result of 
receiving: 


(e.1) an ICMPv6 error message, or 


(e.2) a packet destined to an IPv6 multicast address (there are 
two exceptions to this rule: (1) the Packet Too Big 
Message - Section 3.2 - to allow Path MTU discovery to 
work for IPv6 multicast, and (2) the Parameter Problem 
Message, Code 2 - Section 3.4 - reporting an unrecognized 
IPv6 option that has the Option Type highest-order two 
bits set to 10), or 


(e.3) a packet sent as a link-layer multicast, (the exception 
from e.2 applies to this case too), or 


(e.4) a packet sent as a link-layer broadcast, (the exception 
from e.2 applies to this case too), or 


(e.5) a packet whose source address does not uniquely identify 
a single node -- e.g., the IPv6 Unspecified Address, an 
IPv6 multicast address, or an address known by the ICMP 
message sender to be an IPv6 anycast address. 


(f) Finally, to each sender of an erroneous data packet, an IPv6 
node MUST limit the rate of ICMPv6 error messages sent, in order 
to limit the bandwidth and forwarding costs incurred by the 
error messages when a generator of erroneous packets does not 
respond to those error messages by ceasing its transmissions. 
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There are a variety of ways of implementing the rate-limiting 
function, for example: 


(f.1) Timer-based - for example, limiting the rate of 
transmission of error messages to a given source, or to 
any source, to at most once every T milliseconds. 


(£.2) Bandwidth-based - for example, limiting the rate at 
which error messages are sent from a particular interface 
to some fraction F of the attached link’s bandwidth. 


The limit parameters (e.g., T or F in the above examples) MUST 
be configurable for the node, with a conservative default value 
(e.g., T = 1 second, NOT 0 seconds, or F = 2 percent, NOT 100 
percent). 


The following sections describe the message formats for the above 
ICMPv6 messages. 
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3. ICMPv6 Error Messages 
3.1 Destination Unreachable Message 


0 1 2 3 
OL23 459 67 3 9-01 23 45 67 89 012345 6 7°89 01 
a a o es ee ee 

| Type | Code | Checksum 

Fatt ata ta tata tartar e E a L 
| Unused | 
a a es es a ee ee 
| As much of invoking packet 

+ as will fit without the ICMPv6 packet + 
| exceeding 576 octets | 


IPv6 Fields: 
Destination Address 


Copied from the Source Address field of the invoking 


packet. 
ICMPv6 Fields: 
Type A 
Code 0 - no route to destination 
1 - communication with destination 


administratively prohibited 


2 - not a neighbor 
3 - address unreachable 
4 - port unreachable 
Unused This field is unused for all code values. 


It must be initialized to zero by the sender 
and ignored by the receiver. 
Description 


A Destination Unreachable message SHOULD be generated by a router, or 
by the IPv6 layer in the originating node, in response to a packet 
that cannot be delivered to its destination address for reasons other 
than congestion. (An ICMPv6 message MUST NOT be generated if a 
packet is dropped due to congestion.) 


If the reason for the failure to deliver is lack of a matching entry 
in the forwarding node’s routing table, the Code field is set to 0 
(NOTE: this error can occur only in nodes that do not hold a "default 
route" in their routing tables). 
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If the reason for the failure to deliver is administrative 
prohibition, e.g., a "firewall filter", the Code field is set to 1. 


If the reason for the failure to deliver is that the next destination 
address in the Routing header is not a neighbor of the processing 
node but the "Strict" bit is set for that address, then the Code 
field is set to 2. 


If there is any other reason for the failure to deliver, e.g., 
inability to resolve the IPv6 destination address into a 
corresponding link address, or a link-specific problem of some sort, 
then the Code field is set to 3. 


A destination node SHOULD send a Destination Unreachable message with 
Code 4 in response to a packet for which the transport protocol 
(e.g., UDP) has no listener, if that transport protocol has no 
alternative means to inform the sender. 


Upper layer notification 


A node receiving the ICMPv6 Destination Unreachable message MUST 
notify the upper-layer protocol. 
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3.2 Packet Too Big Message 


0 1 2 3 
01 .2.3°4,.9 6 1-8 9:0. 1.2.3: 4:5-6.7.8:9:0:1.2.3.:4 5.6 17.8 9 01 
Fatt ata tata tata tabard a E o o o O 

| Type | Code | Checksum 

tatapat taap e HI p l epla 
| MTU | 
e ata ta tata tata o A O 
| As much of invoking packet 

+ as will fit without the ICMPv6 packet + 
| exceeding 576 octets | 


IPv6 Fields: 
Destination Address 


Copied from the Source Address field of the invoking 


packet. 
ICMPv6 Fields: 
Type 2 
Code 0 
MTU The Maximum Transmission Unit of the next-hop link. 


Description 


A Packet Too Big MUST be sent by a router in response to a packet 
that it cannot forward because the packet is larger than the MTU of 
the outgoing link. The information in this message is used as part 
of the Path MTU Discovery process [RFC-1191]. 


Sending a Packet Too Big Message makes an exception to one of the 
rules of when to send an ICMPv6 error message, in that unlike other 
messages, it is sent in response to a packet received with an IPv6 
multicast destination address, or a link-layer multicast or link- 
layer broadcast address. 


Upper layer notification 


An incoming Packet Too Big message MUST be passed to the upper-layer 
protocol. 
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3.3 Time Exceeded Message 


0 1 2 3 

0 1.2-3 45 6 7-8 9:0. 12.3456. 7-8: 9° 0) 12 34°36 7-8 9 01 
tata A PO A O tata tata ta tata tata + ta tata ++ +++ +++ +++ +++ 
| Type | Code | Checksum 
PR A AO A A A e $ e e $ + d+ $ + d+ + ++ +++ +++ +++ +++ 
| Unused | 
tata tata tar O + ta tata ta tata ta tata ta tata ++ +++ +++ +++ +++ 
| As much of invoking packet 
+ as will fit without the ICMPv6 packet + 
| exceeding 576 octets | 


IPv6 Fields: 


Destination Address 
Copied from the Source Address field of the invoking 


packet. 
ICMPv6 Fields: 
Type 3 
Code O - hop limit exceeded in transit 
1 - fragment reassembly time exceeded 
Unused This field is unused for all code values. 


It must be initialized to zero by the sender 
and ignored by the receiver. 


Description 


If a router receives a packet with a Hop Limit of zero, or a router 
decrements a packet’s Hop Limit to zero, it MUST discard the packet 
and send an ICMPv6 Time Exceeded message with Code 0 to the source of 
the packet. This indicates either a routing loop or too small an 
initial Hop Limit value. 


The router sending an ICMPv6 Time Exceeded message with Code 0 SHOULD 
consider the receiving interface of the packet as the interface on 
which the packet forwarding failed in following rule (d) for 
selecting the Source Address of the message. 


Upper layer notification 


An incoming Time Exceeded message MUST be passed to the upper-layer 
protocol. 
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3.4 Parameter Problem Message 


0 1 2 3 
OG 2034S) 06 7, 89 0.0. 1-23: Age BOQ Te 2.34 5.6: 7-8-7907 
tata ta tata O A tata ta ta tata tata $ ta tata ++ + ++ +++ +++ +++ 

| Type | Code | Checksum 

PR A AO O O + dd + ta tata ta tata ta tata ++ +++ +++ +++ +++ 
| Pointer | 
tata tata tata ta tata tata tata tata + ta tata ++ +++ +++ +++ +++ 
| As much of invoking packet 

+ as will fit without the ICMPv6 packet + 
| exceeding 576 octets | 


IPv6 Fields: 
Destination Address 


Copied from the Source Address field of the invoking 


packet. 
ICMPv6 Fields: 
Type 4 
Code 0 - erroneous header field encountered 
1 - unrecognized Next Header type encountered 
2 - unrecognized IPv6 option encountered 
Pointer Identifies the octet offset within the 


invoking packet where the error was detected. 


The pointer will point beyond the end of the ICMPv6 
packet if the field in error is beyond what can fit 
in the 576-byte limit of an ICMPv6 error message. 


Description 


If an IPv6 node processing a packet finds a problem with a field in 
the IPv6 header or extension headers such that it cannot complete 
processing the packet, it MUST discard the packet and SHOULD send an 
ICMPv6 Parameter Problem message to the packet’s source, indicating 
the type and location of the problem. 


The pointer identifies the octet of the original packet’s header 


where the error was detected. For example, an ICMPv6 message with 
Type field = 4, Code field = 1, and Pointer field = 40 would indicate 


Conta & Deering Standards Track [Page 12] 


RFC 1885 ICMPv6 (ICMP for IPv6) December 1995 
that the IPv6 extension header following the IPv6 header of the 
original packet holds an unrecognized Next Header field value. 

Upper layer notification 


A node receiving this ICMPv6 message MUST notify the upper-layer 
protocol. 
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4. ICMPv6 Informational Messages 
4.1 Echo Request Message 


0 1 2 3 
0-12 3 45:06:01. 28" 90.00 1.2. 3 45 6 7 8 9 0 1 23° AS 6 OY 8D 01 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + 

| Type | Code | Checksum 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++ 
| Identifier | Sequence Number 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+++ 
| Data 

+-+-+-+-+- 


IPv6 Fields: 
Destination Address 
Any legal IPv6 address. 


ICMPv6 Fields: 


Type 128 
Code 0 
Identifier An identifier to aid in matching Echo Replies 


to this Echo Request. May be zero. 
Sequence Number 


A sequence number to aid in matching Echo Replies 
to this Echo Request. May be zero. 


Data Zero or more octets of arbitrary data. 

Description 

Every node MUST implement an ICMPv6 Echo responder function that 
receives Echo Requests and sends corresponding Echo Replies. A node 
SHOULD also implement an application-layer interface for sending Echo 
Requests and receiving Echo Replies, for diagnostic purposes. 


Upper layer notification 


A node receiving this ICMPv6 message MAY notify the upper-layer 
protocol. 
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4.2 Echo Reply Message 


0 1 2 3 

(O 203.45) 6 4. 8°90. L238. 4 6 FF :890:-1.2.3.4 0.6 8 9. 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + 
| Type | Code | Checksum 
HA A OA A A O O O AO A A A O O O O A A A o A A ++ 
| Identifier | Sequence Number 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++ 
| Data 

+-+-+-+-+- 


IPv6 Fields: 
Destination Address 


Copied from the Source Address field of the invoking 
Echo Request packet. 


ICMPv6 Fields: 


Type 129 

Code 0 

Identifier The identifier from the invoking Echo Request message. 
Sequence The sequence number from the invoking Echo Request 
Number message. 

Data The data from the invoking Echo Request message. 
Description 


Every node MUST implement an ICMPv6 Echo responder function that 
receives Echo Requests and sends corresponding Echo Replies. A node 
SHOULD also implement an application-layer interface for sending Echo 
Requests and receiving Echo Replies, for diagnostic purposes. 


The source address of an Echo Reply sent in response to a unicast 
Echo Request message MUST be the same as the destination address of 
that Echo Request message. 


An Echo Reply SHOULD be sent in response to an Echo Request message 
sent to an IPv6 multicast address. The source address of the reply 
MUST be a unicast address belonging to the interface on which the 
multicast Echo Request message was received. 
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The data received in the ICMPv6 Echo Request message MUST be returned 
entirely and unmodified in the ICMPv6 Echo Reply message, unless the 
Echo Reply would exceed the MTU of the path back to the Echo 
requester, in which case the data is truncated to fit that path MTU. 


Upper layer notification 


Echo Reply messages MUST be passed to the ICMPv6 user interface, 
unless the corresponding Echo Request originated in the IP layer. 
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4.3 Group Membership Messages 
The ICMPv6 Group Membership Messages have the following format: 


0 1 2 3 
0-12 3 456: 7.:8: 90.00 1.2. 3 45 6" 7 8 9 0 1.203 4 56 Y :8..9 OL 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+++ 

| Type | Code | Checksum 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + 
| Maximum Response Delay | Unused 

HA AO AA A O O O O A A A A O O O O A A A ss A A ++ 


Multicast 


| 
+ 
| 
+ 
Address | 
+ 
| 


+ 
+ 
+ 
+-+-+-+-+-+-+-+-+-4+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
IPv6 Fields: 
Destination Address 
In a Group Membership Query message, the multicast 
address of the group being queried, or the Link-Local 
All-Nodes multicast address. 
In a Group Membership Report or a Group Membership 
Reduction message, the multicast address of the 
group being reported or terminated. 
Hop Limit 1 
ICMPv6 Fields: 
Type 130 - Group Membership Query 
131 - Group Membership Report 
132 - Group Membership Reduction 
Code 0 


Maximum Response Delay 


In Query messages, the maximum time that responding 
Report messages may be delayed, in milliseconds. 
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Unused 
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In Report and Reduction messages, this field is 
is initialized to zero by the sender and ignored by 
receivers. 


Initialized to zero by the sender; ignored by receivers. 


Multicast Address 


Description 


The address of the multicast group about which the 
message is being sent. In Query messages, the Multicast 
Address field may be zero, implying a query for all 
groups. 


The ICMPv6 Group Membership messages are used to convey information 
about multicast group membership from nodes to their neighboring 
routers. The details of their usage is given in [RFC-1112]. 


Conta & Deering 
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7. Security Considerations 


Security issues are not discussed in this memo. 
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